ITIL 4 Foundation Practice Exam

Which of the following is NOT a purpose of configuration management?

1. To maintain an accurate record of configuration items

2. To protect against data breaches

3. To control changes to configuration items

4. To ensure compliance with regulatory requirements

The correct answer is: To protect against data breaches

The purpose of configuration management is to systematically manage and maintain the information related to configuration items (CIs) throughout their lifecycle. It primarily focuses on three key aspects: maintaining accurate records of configuration items, controlling changes to them, and ensuring compliance with relevant standards and regulations. Maintaining an accurate record of configuration items is crucial as it enables IT teams to have a clear inventory of all assets, their relationships, and their current state. This provides a foundation for efficient IT service management. Controlling changes to configuration items ensures that any modifications are documented, reviewed, and approved, which helps maintain the integrity and stability of IT services. Ensuring compliance with regulatory requirements is also integral to configuration management because it helps organizations adhere to legal, security, and regulatory standards, thereby reducing risks and promoting accountability. While protecting against data breaches is an important aspect of IT security and governance, it does not fall under the primary purposes of configuration management itself. Configuration management primarily deals with the management of CIs, rather than direct measures to prevent security incidents like data breaches. Thus, identifying the option that does not align with the core objectives of configuration management helps clarify its specific role within IT service management practices.